[EMAIL PROTECTED] (Alex Martelli) wrote:

>Tim Roberts <[EMAIL PROTECTED]> wrote:
>   ...
>> Internet Explorer will allow any registered ActiveScript language to be
>> used in a web page.  Python qualifies.  In the latest Win32 extensions,
>> there is a script in win32comext/axscript/client/pyscript.py that will
>> register Python as an ActiveScript language.
>> 
>> The you can say
>> 
>>   <script language="python">
>>   print "<h1>Hello, there.</h1>"
>>   </script>
>
>Out of curiosity, how "sandboxed" is this Python?  I remember a similar
>solution being withdrawn once because it wasn't really safely sandboxed,
>so the ``script'' could easily do any arbitrary damage to the machine...

I remember this as well.  I thought the holes were largely plugged, but I
admit to losing track of the discussion.  Is Mark Hammond in the viewing
audience?

One of the compromises is that the pywin32 installer does not perform this
registration automatically.  The script is present, but you have to run the
registration script yourself.
-- 
- Tim Roberts, [EMAIL PROTECTED]
  Providenza & Boekelheide, Inc.
-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to